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BACKGROUND OF THE INVENTION 
Field of the Invention 

The present invention relates to a method for 
making the execution of a computer program secure and a 
30 secure electronic entity for implementing a method of 

that kind. 

The invention may be used in particular to make a 
smart card secure. 
Description of Related Art 
35 References hereinafter to "making a computer 

program secure" mean: 

- detecting malicious attacks seeking to modify 
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the normal behavior of a computer program, and also 

- any processing aimed at making the execution of 
a computer program reliable, in particular a program 
executed in an environment subject to very high levels of 

5 interference, such as a satellite, or a computer program 

requiring very high reliability, for example a program 
controlling a cardiac implant. 

Moreover, the expression "computer program" 
refers to any program, regardless of the computer 

10 language and the storage means employed. By way of 
nonlimiting example, the computer program may be written 
in machine language, assembler language, C, C++, Java or 
VHDL . The program may be stored in permanent memory, for 
example ROM, EEPROM or hard disk, or in volatile memory, 

15 for example RAM. The program may equally be implemented 

in the form of an integrated circuit, for example a 
field-programmable gate array (FPGA) or an application- 
specific integrated circuit (ASIC) . 

The present invention detects an attack intended 

20 to modify the execution of a computer program on a secure 

electronic entity, for example a smart card, a secure 
PCMIA card (for example an IBM 4758 card) , a USB key 
or a passport integrating a contactless microchip in 
one of its pages. It also triggers countermeasures to 

25 such attacks. 

In particular, the present invention detects 
attacks that interfere with the operation of an 
electronic entity, for example so-called fault attacks. 

Such attacks seek illegitimately to modify the 

30 content or the reading of the content of a register, a 

memory or a bus, or to oblige a processor not to execute 
certain instructions of a computer program, or to execute 
them badly. The attacked computer program may then be 
executed in a very different way to that in which it was 

35 designed to be executed. 

Attacks of this kind that are already known in 
the art include: 

- generating a voltage spike at one of the power 
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supply terminals of the processor; 

- suddenly increasing its temperature; 

- rapidly changing its clock frequency or 
supply voltage; 

5 - applying a flash of light, a laser beam or an 

electromagnetic field to a portion of the silicon 
constituting it. 

In the present state of the art, the person 
skilled in the art knows various ways to make a computer 
10 program secure, and in particular to combat attacks by 
generating faults in a smart card. 

A first method consists in installing sensors in 
the smart card components to detect these attacks. 

This kind of method is of restricted efficacy, 
15 however, since it is in practice impossible to place 
sensors over the whole of the surface of the component. 
Moreover, the sensors being also made of silicon, it is 
possible also to interfere with them or to modify the 
information that they transmit. 
20 A second prior art method used to make most smart 

card operating systems secure is based on the use of 
"semaphores", and includes: 

- a step of modifying the content of a memory 
area during the execution of a set of critical 

25 instructions; and 

- a verification step which, by reading the 
content of the memory area cited above, verifies that the 
modification step cited above has been carried out. 

If the memory area has not been modified, that 
30 means that the modification step has not been carried out 
and consequently that the critical instructions cited 
above have not been executed correctly. 

It will be noted that in the present document the 
term "semaphore" refers to a concept differing from the 
35 process of the same name used in the field of programming 
concurrent processes . 

The second method, which is implemented by 
software, does not have the drawbacks of the first method 
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cited above. 

Nevertheless, semaphores are conventionally 
implemented by variables residing in working memory (RAM) 
and their manipulation (positioning, reading) is 
relatively slow and costly in terms of memory space. This 
constraint represents a particularly severe penalty if 
the program is executed on systems having limited 
resources (memory, computation power, etc.), such as 
smart cards. The present invention is aimed at a software 
method that does not have the above drawbacks. 



BRIEF SUMMARY OF THE INVENTION 

To this end, the present invention provides a 
method of making the execution of a computer program 
secure, the method including: 

- a step of stacking a predetermined value in an 
instruction stack of the program; and 

- a step of unstacking said stack adapted, where 
appropriate, to detect an execution anomaly. 

An instruction stack is an area of memory for 
temporarily storing data. Values are stacked in the stack 
and unstacked from it by means of two specific 
instructions, respectively called PUSH and POP in the 
remainder of the description. 

These instructions manipulate only values of 
fixed size, for example one byte. 

Use of the stack is controlled by a "last in 
first out" (LIFO) algorithm. 

In particular, the stack stores the return 
address of a procedure (the RET instruction in the 80x86 
assembler language, for example) . This is known in the 
art. The method of the invention therefore uses the 
execution stack to store a value for detecting an 
execution anomaly . 

An execution stack being fast to access in read 
and write modes and of low cost in terms of memory space, 
the method of the invention is particularly suitable for 
making secure computer programs executed on systems 
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having limited resources. 

This novel use of the instruction stack has other 
advantages that will be explained later. 

BRIEF DESCRIPTION OF THE SEVERAL VIEWS OF THE DRAWING 
5 Figure 1 represents a preferred embodiment of a 

smart card 100 of the invention. 

DETAILED DESCRIPTION OF THE INVENTION 

In a preferred embodiment, the stacking and 
10 unstacking steps are respectively associated with 
elements of at least one subset of instructions of said 
program. 

For example, the stacking step may be associated 
with the instruction "open (file)" to open a file and the 

15 unstacking step with the instruction "close (file) " to 

close that file. 

This feature is particularly advantageous as it 
enables automation of the writing of instructions by 
associating the stacking and unstacking operations with 

20 the elements cited above, namely the instructions "open" 

and "close" in the above example, for example using an 
editor . 

In a first variant of this preferred embodiment, 
the elements of the subset of instructions are 
25 respectively an opening bracket and a closing bracket of 
a system of brackets. 

The person skilled in the art of computer 
languages knows that, in language theory, a system of 
brackets is present if a text includes as many opening 
30 brackets as closing brackets and any beginning of that 
text contains a number of opening brackets greater than 
or equal to the number of closing brackets. 

According to this particularly advantageous 
feature, the stacking and unstacking steps may be 
35 respectively associated with the instructions: 

- " ( " and " ) " ; or 

- " { " and " } " ; or 

- "begin" and "end"; or 
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- "repeat" and "until". 

In another variant of this preferred embodiment , 
the unstacking step is associated with a return 
instruction of the program or a subroutine thereof. 
5 This feature advantageously enables the use of 

normal unstacking operations effected conventionally on 
the return from a program or a subroutine (on execution 
of the return instruction) to detect an execution anomaly 
if the values unstacked on this occasion do not 
10 correspond to those that should have been unstacked in 
the event of normal execution of the program. 

According to another feature of the invention, 
the program is in a programming language that includes a 
first instruction whose execution implements the stacking 
15 step and/or a second instruction whose execution 

implements said unstacking step. 

In this embodiment, new instructions are 
integrated into the programming language, each 
instruction having its own function and either a stacking 
20 function or an unstacking function for the purposes of 

making the program secure. 

Returning to the example briefly touched upon 
above, a new instruction called "open (file)" may be 
created, enabling simultaneous opening of the file and 
25 stacking of a predetermined value in the instruction 

stack of a program. 

The programmer is therefore assured that security 
functions are executed on each file opening, without him 
even needing to think about this and without any 
30 particular software tool being necessary. 

The second instruction preferably terminates the 
program or a subroutine of the program. 

This embodiment has the same advantages as the 
embodiment referred to above in which the stacking and 
35 unstacking instructions are associated with elements of a 
subset of instructions of the program, rather than 
integrated into them. Consequently, it will not be 
described in detail hereinafter. 
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In a preferred embodiment of the invention, the 
predetermined value is representative of a subset of 
critical instructions of the program. 

This feature is particularly advantageous when 
5 the method is used to make a plurality of subsets of 
instructions of the program secure. 

It enables detection, during the unstacking step, 
that a particular subset of instructions has been 
executed correctly, rather than another subset of 
10 instructions whose execution would have led to the 
stacking of another predetermined value. 

The person skilled in the art will readily 
understand that this feature may be used to make secure 
different branches of a test (of the type, "if", "then", 
15 "else" in the C language) , a different predetermined 

value being stacked in each of the branches and the 
unstacking step being executed at the end of this test. 

When the program calls a subroutine, this feature 
also assures, during the execution of that subroutine, 
20 that the subroutine was entered after the subroutine call 

and not after a fault attack. 

Two examples of the use of this feature are 
described in detail hereinafter with reference to 
appendices A and C. 
25 According to another feature of the invention, 

the method of the invention includes an anomaly 
processing step that is executed if a value other than 
the predetermined value is unstacked during the 
unstacking step. 

30 This feature has the advantage of enabling 

execution of the anomaly processing step as soon as an 
attack has modified the normal execution of the program 
and in particular the call to or the return from 
execution of a function of that program. The method is 

35 then particularly effective. 

In the case of using the method of the invention 
in a smart card, for example, anomaly processing may 
consist in rendering the card inoperative by destroying 
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its operating system. 

Three examples of the use of this feature are 
described in detail hereinafter with reference to 
appendices A, C and D. 
5 In one particular embodiment in which the program 

includes at least one call to a subroutine, the 
unstacking step is executed before that call and the 
predetermined value eliminated from the stack during 
execution of the subroutine. 
10 This feature therefore checks that the subroutine 

has been executed and that it has been executed 
correctly . 

If the call to the subroutine has been skipped or 
if the unstacking step has not been executed, the 
15 instruction stack retains the stacked predetermined 

value . 

Subsequent unstacking of that value leads to the 
detection of the execution anomaly, as explained below 
with reference to appendices B and C. 

20 In this particular embodiment, the predetermined 

value may advantageously be the address of an anomaly 
processing function . 

Thus if the predetermined value is not unstacked 
during execution of the subroutine, for example as a 

25 result of an attack the consequence of which is non- 
execution of the subroutine, subsequent unstacking of 
that value by the processor will lead to the execution of 
this processing function. An example is described in 
detail hereinafter with reference to appendix B. 

30 This feature triggers the processing function if 

the program suffers any kind of attack whose consequence 
is to prevent execution of the subroutine. It is 
therefore particularly useful for making critical 
functions secure, for example an authentication 

35 procedure. 

In another particular embodiment in which the 
program includes at least one call to a subroutine, the 
stacking step is executed during execution of the 
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subroutine and the predetermined value is eliminated 
after execution of the subroutine. 

This feature checks that the return from the 
subroutine is effected correctly. 
5 If the return from the subroutine has been 

interfered with, the instruction stack retains the 
stacked predetermined value. 

This particular embodiment is described in detail 
with reference to appendix D. 

10 In this other particular embodiment, the 

predetermined value may advantageously be the address of 
an anomaly processing function. 

For the reasons stated above, this feature 
triggers the processing function if the program suffers 

15 any kind of attack whose consequence is to prevent 

execution of the subroutine. It is therefore particularly 
useful for making critical functions secure, for example 
an authentication procedure. 

An example of the use of this feature is given 

20 with reference to appendix E. 

The invention also provides an information medium 
readable by a computer system, and where appropriate 
totally or partially removable, in particular a CD-ROM or 
a magnetic medium, such as a hard disk or a diskette, or 

25 a transmissible medium such as an electrical or optical 
signal, said information medium containing instructions 
of a computer program for executing a method as described 
briefly hereinabove if the program is loaded into and 
executed by an electronic data processing system. 

30 The invention also provides a computer program 

stored on an information medium, the program including 
instructions for executing a method as described briefly 
hereinabove if that program is loaded into and executed 
by an electronic data processing system. 

35 The invention is also aimed at a secure 

electronic entity and a smart card including means for 
implementing a method as briefly described above. 

The particular advantages and features specific 
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to the information medium, the computer program and the 
smart card being the same as those explained hereinabove 
with reference to the method of the invention, they will 
not be repeated here. 
5 Other aspects and advantages of the present 

invention will become more clearly apparent on reading 
the following description of particular embodiments, that 
description being given entirely by way of nonlimiting 
example and with reference to appendices A to E, which 

10 contain five examples of computer programs made secure in 
accordance with the invention. 

Those programs are written in the C language and 
in 80c51 assembler language. To facilitate the 
description thereof, each line is preceded by a 

15 commentary between the character strings "/*" and "*/". 

A preferred embodiment of a smart card of the 
invention is described with reference to figure 1. 

Appendix A comprises 33 lines of instructions 
numbered /*al*/ to /*a33*/ of a computer program whose 

20 execution is made secure by a preferred embodiment of a 

method of the invention. 

The line /*al*/ is not an instruction as such. It 
symbolizes the fact that the program of appendix A may 
contain a certain number of instructions instead of the 

25 character string in addition to the instructions 

for making the program secure. It represents a set of 
instructions unrelated to the present invention. 

The line /*a2*/ includes a directive #pragma asm, 
indicating to the compiler that the subsequent 

30 instruction lines are in 80c51 assembler language. 

The line /*a3*/ includes an instruction which 
performs a step of stacking the predetermined value 0 (in 
hexadecimal notation) in the instruction stack of the 
program of appendix A. For simplicity, it is stated 

35 hereinafter that the value 0 is stacked at the line 
/*a3*/ . 

Then the value 1 is stacked at the line /*a4*/. 
In the preferred embodiment described here, the 
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predetermined values OOh and Olh respectively represent 
the more significant byte and the less significant byte 
of the value 1 (in hexadecimal notation) coded on two 
bytes . 

5 The line /*a5*/ includes a directive tpragma 

endasm, indicating to the compiler that the subsequent 
lines of instructions are no longer in 80c51 assembler 
language, but in C. 

The lines /*a6*/ and /*a7*/ similar to the line 
10 /*al*/ previously described represent a set of 

instructions unrelated to the present invention. 

The line /*a8*/ includes an instruction during 
which a test is performed to determine if the content of 
the "test" variable is equal to "TRUE". If this is the 
15 case at the time of execution of the program of appendix 

A, the processor executes the instructions /*a9*/ to 
/*a23*/ after the test at line /*a8*/. This is known in 
the art . 

Otherwise, it executes the instruction of the 
20 line /*a24*/ directly. 

The line /*a9*/ is identical to the line /*a2*/ 
described above. 

The lines /*al0*/ and /*all*/ are similar to the 
lines /*a3*/ and /*a4*/ described above. They stack in 
25 two stages the value 1 (in hexadecimal notation) coded on 
two bytes. 

The line /*al2*/ is identical to the line /*a5*/ 
described above. 

The lines /*al3*/ and /*al4*/ similar to the line 
30 /*al*/ described above represent a set of instructions 

unrelated to the present invention. Those instructions 
may of course manipulate the instruction stack provided 
that they leave the instruction stack, following line 
/*al4*/, in the state prior to the instruction /*al3*/. 
35 The line /*al5*/ is identical to the line /*a2*/ 

described above. 

The line /*al6*/ includes an instruction whose 
execution performs a step of unstacking from the 
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instruction stack, the unstacked value being stored in a 
register A. For simplicity, this is referred to 
hereinafter as unstacking into the register A in the line 
/*al6*/ . 

5 Following the instruction /*al6*/, the register A 

stores the last value stacked in the stack (the stack 
operates in accordance with an LIFO mechanism) . 

The line /*al7*/ includes an instruction for 
comparing the content of the register A with the value 
10 02H. Normally, if the program has not been attacked 

during its execution since the end of the instruction in 
the line /*all*/, the register A contains the value 02H 
stacked during the instruction in the line /*all*/. 

The unstacking step of the line /*al6*/ therefore 
15 enables detection of an execution anomaly by the method 
in accordance with the present invention. 

If, during the comparison step of the line 
/*al7*/, it is found that the value of the register A is 
different from the value 02H, the program of appendix A 
20 branches to the "anomaly" address during the instruction 
of the line /*al8*/. 

In the embodiment described here, that "anomaly" 
address is the address of an anomaly processing step of 
the method of the invention. In practice, the "anomaly" 
25 address is an address in hexadecimal notation that the 
processor can interpret directly. 

On the other hand, if, during the comparison step 
of the line /*al7*/, it is found that the register A is 
storing the value 02H, the program of appendix A executes 
30 the instruction of the line /*a29*/. 

The lines /*al9*/ to /*a21*/ are similar to the 
lines /*al6*/ to /*al8*/ described above: 

- unstacking into the register A at the line 

/*al9V; 

35 - comparison of the register A with the value 00H 

at the line /*a20*/, the value 00H corresponding to the 
predetermined value stacked at the line /*al0*/; and 

- branching to the "anomaly" address during the 
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instruction of the line /*a21*/ if the register A does 
not contain the value 00H at the time of executing the 
instruction of the line /*a20*/. 

On the other hand, if the register A contains the 
5 value 00H, the program executes the instruction of the 
line /*a22*/, which is identical to the line /*a5*/ 
described above. 

The lines /*a24*/ and /*a25*/ are similar to the 
line /*al*/ described above and represent a set of 
10 instructions unrelated to the present invention. 

The lines /*a26*/ to /*a33*/ are similar to the 
lines /*al5*/ to /*a22*/ described above. 

They include unstacking steps /*a28*/ and /*a30*/ 
enabling detection of a program execution anomaly if the 
15 stack has been corrupted and, just prior to execution of 

the instruction of the line /*a27*/, does not contain the 
predetermined values 01H and 00H stacked in the lines 
/*a4*/ and /*a3*/, respectively. 

In conclusion, the two subsets of instructions 
20 respectively consisting of the lines /*a6*/ to /*a25*/ 

and /*al3*/ to /*al4*/ are made secure. 

The subset of instructions consisting of the 
lines /*a6*/ and /*a25*/ is made secure by: 

- the step of stacking the predetermined value 1 
25 coded on two bytes (lines /*a3*/ and /*a4*/); and 

- the stacking step of the lines /*a27*/ and 

/*a30V . 

Similarly, the subset of instructions consisting 
of the lines /*al3*/ and /*al4*/ is made secure by: 
30 - the step of stacking the predetermined value 2 

coded on two bytes (lines /*al0*/ and /*all*/); and 

- the stacking step of the lines /*al6*/ and 

/*al9*/ . 

This implementation is in no way limiting on the 
35 invention, and the predetermined values 1 and 2 could 

also be identical or selected at random. 

Appendix B includes 28 lines of instructions 
numbered /*bl*/ to /*b28*/ of a computer program whose 
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execution is made secure by a preferred embodiment of the 
method of the invention. 

The lines /*bl*/ and /*b2*/ constitute the first 
two lines declaring the function "function" in C, that 
5 function having no input parameter and no return value. 

The line /*bll*/ includes the last instruction of the 
declaration of that function. 

The line /*b3*/ similar to the line /*al*/ 
described above with reference to appendix A represents a 
10 set of instructions unrelated to the present invention. 

The line /*b4*/ is identical to the line /*a2*/ 
described above with reference to appendix A. 

During the instructions of lines /*b5*/ and 
/*b6*/, there is effected, in two stages, a step of 
15 stacking a predetermined value coded on two bytes, that 

value being, in the preferred embodiment of the 
invention, the address of an anomaly processing function 
OS_killcard. In practice, the address "OS_killcard" is an 
address in hexadecimal notation that the processor can 
20 interpret directly. 

In the case of using the method to make a 
microcircuit card secure, the function OS_killcard may, 
for example, inhibit the functioning of the card by 
destroying its operating system. 
25 The line /*b7*/ is identical to the line /*a5*/ 

described above with reference to appendix A. 

The line /*b8*/ similar to the line /*al*/ 
described above with reference to appendix A represents a 
set of instructions unrelated to the present invention. 
30 The line /*b9*/ includes an instruction for 

calling a critical function "critical_f unction" , the code 
of which is described with reference to lines /*bl2*/ to 
/*b28*/ . 

Calling a subroutine automatically leads to 
35 stacking of the return of address of that subroutine in 

the stacked instructions. This is known in the art. The 
return address, coded on two bytes, therefore occupies 
two registers of the stack. In the present example, this 
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address corresponds to the address of the instruction of 
the line /*bl0*/, which must be executed on the return 
from the function "critical_f unction" . 

The lines / '*hl2* / and /*fc>13*/, on the one hand, 
5 and /*b28*/, on the other hand, constitute the first two 

lines and the last line of the declaration of the 
function "critical_f unction" , that function having no 
input parameter and no return value. 

After execution of the instructions of the lines 
10 /*bl2*/ and /*bl3*/, the last four values stacked in the 

instruction stack are, in chronological order: 

- the more significant byte of the address of the 
function OS_killcard (line /*b5*/); 

- the less significant byte of the address of the 
15 function OS_killcard (line /*b6*/); 

- the more significant byte of the address of the 
first instruction of the line /*bl0*/; and 

- the less significant byte of the address of the 
first instruction of the line /*bl0*/. 

20 The line /*bl4*/ similar to line /*al*/ described 

above with reference to appendix A represents a set of 
instructions unrelated to the present invention. 

As described above with reference to the lines 
/*al3*/ and /*al4*/ of appendix A, it is assumed that 
25 these instructions leave the instruction stack in the 
state in which it was prior to the instruction /*bl4*/. 

The line /*bl5*/ is identical to the line /*a2*/ 
described above with reference to appendix A. 

In the line /*bl6*/, the instruction stack is 
30 unstacked into the register A, the content of that 
register A being thereafter saved in a register R7 in the 
step /*bl7*/. 

Similarly, in the line /*bl8*/, the instruction 
stack is again unstacked into the register A, the content 
35 of that register A being saved in a register R6 in the 

step /*bl9*/. 

In the light of the foregoing, and in the event 
of normal execution of the program of appendix B, the 
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registers R6 and R7 therefore contain, respectively, 
after the execution of the instruction from the line 
/*bl9V : 

- the more significant byte of the address of the 
5 first instruction of the line /*bl0*/; and 

- the less significant byte of the address of the 
first instruction of the line /*bl0*/. 

The instruction stack is then unstacked twice 
into the register A, in the lines /*b20*/ and /*b21*/, 

10 which in the case of normal execution of the program of 
appendix B amounts to removing the address on two bytes 
of the function OS_killcard from the instruction stack 
during the execution of the subroutine 

"critical_f unction" . 

15 In the line /*b22*/, there is stored in the 

register A the content of the register R6, namely the 
more significant byte of the first instruction of the 
line /*bl0*/, that value being stacked in the instruction 
stack in the step of the line /*b23*/. 

20 In exactly the same way, the less significant 

byte of the first instruction of the line /*bl0*/ is 
stacked, this byte being stored in the register R7, at 
the lines /*b24*/ and /*b25*/. 

The line /*b26*/ is identical to the line /*a5*/ 

25 described above with reference to appendix A. 

The line /*b27*/ similar to the line /*al*/ 
described above with reference to appendix A represents a 
set of instructions unrelated to the present invention. 

The line /*b28*/ is the last line of the 

30 subroutine "critical_f unction" . It is translated into 

assembler language by a "RETURN" or "RET" type 
instruction whose execution causes the program to jump to 
the address stored in the first two registers of the 
instruction stack. This is known in the art. 

35 If it is not attacked while it is being executed, 

the program branches to the first instruction of the line 
/*bl0*/, the address of that instruction having been 
stacked at the lines /*b23*/ and /*b25*/. 
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The line /*bl0*/ similar to the line /*al*/ 
described above with reference to appendix A represents a 
set of instructions unrelated to the present invention. 

The line /*bll*/ terminates the function 
5 "function" . 

In conclusion, in the particular embodiment of 
appendix B, the step of stacking the address of the 
function OS_killcard is effected before calling the 
subroutine "critical_f unction" , that address being 
10 removed from the stack during the execution of that 

subroutine, at the lines /*b20*/ and /*b21*/. 

This embodiment therefore checks that the 
subroutine "critical_f unction" has actually been 
executed . 

15 For example, if the call to that subroutine has 

been interfered with, or more generally if the unstacking 
step had not been effected, the instruction stack retains 
the value of the function OS_killcard, subsequent 
unstacking of that value, for example at the time of 

20 executing a return instruction, leading to detection of 

that execution anomaly and execution of the anomaly 
processing function OS_killcard. 

Appendix C contains 32 lines of instructions 
numbered /*cl*/ to /*c32*/ of a computer program whose 

25 execution is made secure by a preferred embodiment of a 
method of the invention. 

The lines /*cl*/ to /*cll*/ are similar to the 
lines /*bl*/ to /*bll*/ described with reference to 
appendix B, except that the predetermined value 05F1H 

30 coded in hexadecimal on two bytes is stacked in the 

instruction stack, instead of the address of the function 
OS_killcard (lines /*c5*/ and /*c6*/) . 

This stacking step is again effected before the 
call to the subroutine cr it ical_f unction . 

35 In this particular embodiment, the predetermined 

value 05F1H is representative of the subset consisting of 
the instructions of the lines /*cl2*/ to /*cl9*/. 

The lines /*cl2*/ to /*cl9*/ are similar to the 
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lines /*fc>12*/ to /*bl9*/ described with reference to 
appendix B. 

In the event of normal execution of the program 
of appendix C, the registers R6 and R7 therefore contain, 
5 respectively, after the execution of the instruction of 
the line /*cl9*/, the more significant byte and the less 
significant byte of the address of the first instruction 
of the line /*cl0*/ corresponding to the return address 
of the function "critical_f unction" . 

10 The instruction stack is then unstacked into the 

register A at the line /*c20*/, the content of that 
register being thereafter compared with the hexadecimal 
value F1H at the line /*c21*/. 

Normally, if the program has not been attacked, 

15 in particular at the time of calling the function 

"critical_f unction" , the register A contains the value 
F1H stacked during the instruction of the line /*c5*/. 

The unstacking step of the line /*c20*/ therefore 
thus allows the detection of an execution anomaly in 

20 accordance with the present invention. 

If, during the comparison step of the line 
/*c21*/, it is found that the value of the register A is 
different from the value F1H, the program of appendix C 
branches to the address "OS_killcard" during the 

25 instruction of the line /*c22*/. This may occur in 

particular after a fault attack that would lead to 
execution of the function "critical_f unction" without 
being called. 

In this embodiment of the method of the 

30 invention, the anomaly processing program OS_killcard is 

therefore executed if, during the step of unstacking the 
instruction /*c20*/, a value is unstacked that is 
different from the predetermined value F1H stacked at the 
instruction / *c6 * / . 

35 On the other hand, if during the comparison step 

of the line /*c21*/ it is found that the register A is 
holding the value F1H, the program of appendix C executes 
the instruction from the line /*c23*/. 
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The lines /*c23*/ to /*c25*/ are similar to the 
lines /*c20*/ to /*c22*/ described above: 

- unstacking in the register A at line /*c23*/; 

- comparison of the register A with the value 05H 
5 at the line /*c24*/, the value 05H being the 

predetermined value stacked at the line /*c5*/; and 

- branching to the address "OS_killcard" during 
the instruction of the line /*c25*/ if the register A 
does not contain the value 05H at the moment of execution 

10 of the instruction of the line /*c25*/. 

On the other hand, if the register A contains the 
value 05H, the program executes the instruction of the 
line /*c26*/. 

Be this as it may, executing the instructions of 
15 lines /*c20*/ and /*c23*/ eliminates the predetermined 

value 05F1H from the execution stack. 

The lines /*c26*/ to /*c29*/ are similar to the 
lines /*b22*/ to /*b25*/ described above with reference 
to appendix B. 

20 They are used to stack in the instruction stack 

the values stored in the registers R6 and R7 during the 
execution of the instructions of the lines /*cl7*/ and 
/*cl9*/, namely, respectively: 

- the more significant byte of the address of the 
25 first instruction of the line /*cl0*/; and 

- the less significant byte of the address of the 
first instruction of the line /*cl0*/. 

The lines / * c3 0 * / to /*c32*/ are similar to the 
lines /*b26*/ to /*b28*/ described above with reference 

30 to appendix B. 

If there has not been any attack, the program 
therefore branches to the first instruction of the line 
/*cl0*/, the address of that instruction having been 
stacked at the lines /*c27*/ and /*c29*/. 

35 The line /*cl0*/ similar to line /*al*/ described 

above with reference to appendix A represents a set of 
instructions unrelated to the present invention and the 
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line /*cll*/ terminates the function "functionl" of 
appendix C. 

In this embodiment, the value 05F1H could have 
been the address of an anomaly processing function. This 
5 particular embodiment makes the program even more secure 
because even if an attack occurs during the execution of 
the test of the lines /*c20*/ to /*c25*/, that attack 
would be detected by the subsequent use of that anomaly 
processing function . 
10 Instead, a plurality of addresses of anomaly 

processing functions may be used, each being a 
predetermined value associated with a set of critical 
instructions . 

Appendix D comprises 32 lines of instructions 
15 numbered /*dl*/ to /*d32*/ of a computer program whose 
execution is made secure by a preferred embodiment of a 
method of the invention. 

In this particular embodiment, the program 
includes, at the line /*d4*/, a call to a subroutine 
20 "critical_f unction" . 

That call automatically leads to stacking of the 
return address of that subroutine, namely the address of 
the instruction of the line /*d5*/. 

During execution of the instructions of the lines 
25 /*d20*/ to /*d23*/ of the subroutine "critical_f unction" , 

there are stored in the registers R6 and R7 the first 
values of the stack of instructions, namely the return 
address, coded on two bytes, of that subroutine. 

The predetermined value 05F1H is then stacked at 
30 the lines /*d24*/ and /*d25*/. 

It will be noted that, in this embodiment, this 
stacking step is effected during execution of the 
subroutine "critical_f unction" . 

Finally, during execution of the instructions of 
35 the lines /*d27*/ and /*d29*/, the contents of the 
registers R6 and R7 are stacked, these registers 
containing the address of the instruction of the line 
/*d5*/, as explained above. 
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The program of the appendix D therefore branches 
to the line /*d5*/ at the end of the subroutine 
"critical_f unction" . 

Before executing the instruction of the line 
5 /*d5*/, the first two values of the instruction stack are 

normally the predetermined values 05H and F1H stacked at 
the lines /*d24*/ and /*d25*/. 

The line /*d5*/ similar to line /*al*/ described 
above with reference to appendix A represents a set of 
10 instructions unrelated to the present invention. It is 

assumed that those instructions leave the instruction 
stack in the state prior to the line /*d5*/. 

The lines /*d7*/ to /*dl2*/ are similar to the 
lines /*c20*/ to /*c25*/ described above with reference 
15 to appendix C: 

- unstacking in the register A at the lines 
/*d7*/ and /*dl0*/; 

- comparison of the register A with the 
predetermined values F1H and 05H at the lines /*d8*/ and 

20 /*dll*/; 

- branching to the address "OS_killcard" during 
the instruction /*d9*/ (respectively /*dl2*/) if the 
register A does not contain the value F1H (respectively 
05H) at the moment of executing the instruction of the 

25 line /*d9*/ (respectively /*dl2*/) . 

The anomaly processing subroutine OS_killcard is 
therefore executed if, for example, during the unstacking 
step /*d7*/, a value different from the predetermined 
value F1H is unstacked. 

30 It will be noted that in this embodiment, the 

predetermined value 05F1H is eliminated from the 
execution stack after execution of the subroutine 
"critical_f unction" and not after an attack taking place 
at the time of executing another subroutine, the 

35 consequence of that attack being execution of the lines 

/*d6*/ to /*dl3*/. 

This implementation therefore assures that the 
instructions of the lines /*d6*/ to /*dl3*/ are effected 
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after execution of the subroutine "critical_f unction" . 

The lines /*dl4*/ and /*dl5*/ terminate the 
program of appendix D. 

Appendix E contains 28 lines of instructions 
5 numbered /*el*/ to /*e28*/ of a computer program whose 
execution is made secure by a preferred embodiment of a 
method of the invention. 

The lines /*el*/ to /*e5*/ and /*el2*/ to /*e28*/ 
are respectively similar to the lines /*dl*/ to /*d5*/ 
10 and /*dl6*/ to /*d32*/ described with reference to 
appendix D, except that the address of the anomaly 
processing function OS_killcard (lines /*e20*/ and 
/*e21*/) is stacked in the instruction stack instead of 
the predetermined value 05F1H. 
15 That stacking step is also effected during the 

execution of the subroutine "critical_f unction" . 

The program of appendix E therefore branches to 
the line /*e5*/ after the subroutine "critical_f unction" . 

Before execution of the instruction of the line 
20 /*e5*/, the first two values of the instruction stack are 

normally the addresses of the less significant byte and 
the more significant byte of the function OS_killcard, 
those predetermined values having been stacked at the 
lines /*e21*/ and /*e20*/. 
25 Those values are unstacked during execution of 

the instructions of the lines /*e7*/ and /*e8*/. 

This particular embodiment ensures that the 
function "critical_f unction" is executed after it has 
been called and not following a fault attack. 
30 Otherwise, unstacking the address of the function 

OS_killcard at the inevitable time of returning from the 
execution of a subroutine would enable detection of an 
execution anomaly, in particular by implementing this 
function . 

35 The lines /*el0*/ and /*ell*/ terminate the 

program of appendix E. 

Figure 1 represents a preferred embodiment of a 
smart card 100 of the invention. 
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For simplicity , only the content of the 
microcircuit is shown, and is shown diagrammat ically . 

The smart card 100 of the invention further 
includes conventional smart card hardware and software 
elements, in particular a semi-rigid material support and 
power supply means. All of this is known in the art and 
these elements are not described here. 

The microcircuit card 100 of the invention 
includes means for executing a method as described above 
with reference to appendices A to E. 

In the preferred embodiment described here, those 
means consist of a processor 110 associated in particular 
with non-volatile EEPROM, RAM containing an instruction 
stack (STACK), and ROM containing an operating system 
(OS) . 

The semi-volatile EEPROM contains in particular 
the programs of appendices A to E, the processor 100 
reading those programs in order to execute them. 

The EEPROM also contains the two subroutines 
"anomaly" and "OS_killcard" . 

During execution of the programs of appendices A 
to E, the registers R6, R7 and the test register are 
stored in RAM. 

In the embodiment described here, the register A 
is the accumulator of the processor 110. 



